Malicious code in node-toon (npm)

The package node-toon was found to contain malicious code...